#severity:medium

共收录 5584 条相关情报。

← 返回所有主题
安全公告2026-06-09 发布INFO

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free...

CVE-2026-47924

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds...

CVE-2026-47923

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer...

CVE-2026-47925

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnera

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Net::IMAP: Command Injection via ID command argument

CVE-2026-47242

### Summary Two `Net::IMAP` commands, `#id` and `#enable`, do not validate their arguments. Arguments to either comman

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

CVE-2026-47240

Several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command inject

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service...

CVE-2026-24315

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver JAVA (JDBC Test...

CVE-2026-44746

Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver JAVA (JDBC Test Servlet), an unauthenticate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially...

CVE-2026-44757

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certai

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module...

CVE-2026-44744

SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for...

CVE-2026-44750

SAP MDG (Review Match Groups Application) does not perform the necessary authorization checks for authenticated users. T

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API ...

CVE-2026-44754

The Remote Function Call (RFC) modules of the Operational Data Provisioning Data Replication API (ODP-RFC) are missing c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

CVE-2026-5714

The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ parame

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

CVE-2026-10862

The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending...

CVE-2026-44755

SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown...

CVE-2026-11620

A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function...

CVE-2026-11618

A vulnerability was determined in DTStack Taier up to 1.4.0. The affected element is the function preHandle of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote...

CVE-2026-11696

Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had comprom

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a...

CVE-2026-11695

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a...

CVE-2026-11668

Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to lea

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-09 发布INFO

Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who...

CVE-2026-11678

Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the re

历史摘要 · 未重新核验 · GitHub Advisory